Received an Instagram password reset email? Here’s what you need to know

Reports emerged of approximately 17 million Instagram user records posted for sale on a dark web forum while many users received unsolicited password-reset emails; Instagram says it fixed an issue enabling external parties to trigger reset emails. The exposed dataset contains PII (emails, phone numbers, user IDs) but no passwords, and investigators suspect the dump may be a compilation of older breaches or linked to account-spraying; users are advised to enable 2FA, change passwords only via the app, and watch for phishing.